General

  • Target

    https://mega.nz/file/nY5iAIbL#vkFdl_mnwyDzwnL0sMsnpht-V2fTb07g8JwyASg7QzA

  • Sample

    250409-fvjx4szmx3

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      https://mega.nz/file/nY5iAIbL#vkFdl_mnwyDzwnL0sMsnpht-V2fTb07g8JwyASg7QzA

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • Stops running service(s)

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v16

Tasks